CVE-2020-36885

Critical · 9.8

CVSS

9.8

EPSS

1.2%

Published

Dec 10, 2025

CISA due date

—

The record

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.

Affected packages

Ecosystem	Package	Introduced	Fixed